$ rpki-client -vvf repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa File: 3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa (raw, json) Hash identifier: huN1KtLEjsdu8qOGqy80hR78HrSkhaqrUY5ivluzIbo= Subject key identifier: DC:3F:7A:5C:2B:EB:2D:42:68:49:C4:B1:8E:BE:A8:C0:9B:E5:29:4F Certificate issuer: /CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Certificate serial: 7205584A9181FF0A6DBB1A1C4C9F117B3E004CE5 Authority key identifier: F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa Signing time: Fri 18 Oct 2024 06:00:02 +0000 ROA not before: Fri 18 Oct 2024 05:55:02 +0000 ROA not after: Fri 17 Oct 2025 06:00:02 +0000 asID: 149324 IP address blocks: 103.178.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:05:58:4a:91:81:ff:0a:6d:bb:1a:1c:4c:9f:11:7b:3e:00:4c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1364C8B62D0A8EDFF2EB7CE55698011E828988A Validity Not Before: Oct 18 05:55:02 2024 GMT Not After : Oct 17 06:00:02 2025 GMT Subject: CN=DC3F7A5C2BEB2D426849C4B18EBEA8C09BE5294F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:e8:38:c9:bc:27:12:71:9f:87:5f:b2:72: d7:92:2f:7a:16:ca:9b:bf:c9:57:a5:6d:67:ff:83: eb:ce:93:18:de:61:25:b5:fb:60:ff:d8:cc:e1:9a: 21:79:9e:1d:47:72:1b:c2:86:06:de:7d:1e:90:06: d9:e5:5f:9d:0e:11:15:23:9d:6a:7b:44:34:0c:0e: 67:26:5b:ad:70:f8:98:c0:b1:ce:db:2e:b3:63:39: c0:e8:37:36:19:69:38:6f:e4:74:b6:ce:32:ff:0e: 46:60:93:4b:01:07:07:22:48:1c:02:9b:a5:11:a1: 4f:4a:7f:6e:ab:82:d6:df:22:07:5a:c1:87:7d:6d: eb:29:46:a8:3a:05:b2:de:09:38:56:da:f8:6b:b9: 86:b0:88:74:14:23:4e:5e:78:1a:38:ae:64:14:4a: da:5c:5a:5b:5a:3d:7b:13:ac:f8:cc:00:ca:27:f3: 60:96:f4:8e:11:0b:6e:f7:64:80:55:3f:8d:d0:bc: 69:87:e8:d2:d0:28:ad:3c:a8:58:cf:32:e0:26:5e: 39:6e:af:ac:db:86:5e:aa:08:84:34:73:e4:48:06: c4:de:0e:6b:cb:31:fb:14:62:51:dc:08:e0:19:91: b6:9c:15:53:46:cb:d4:02:a1:20:b6:b2:ee:b9:7a: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3F:7A:5C:2B:EB:2D:42:68:49:C4:B1:8E:BE:A8:C0:9B:E5:29:4F X509v3 Authority Key Identifier: keyid:F1:36:4C:8B:62:D0:A8:ED:FF:2E:B7:CE:55:69:80:11:E8:28:98:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1364C8B62D0A8EDFF2EB7CE55698011E828988A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/465fa98f-1e85-4638-bb9d-287378a4ce87/0/3130332e3137382e3135302e302f32342d3234203d3e20313439333234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.150.0/24 Signature Algorithm: sha256WithRSAEncryption 56:15:c0:8e:7a:38:40:04:b3:14:91:cf:96:f4:60:39:a6:dc: 88:aa:ba:35:c9:fd:24:01:38:83:a6:5e:a9:ed:14:6d:ee:48: 3e:87:79:b3:42:af:f2:48:18:7a:4d:59:67:d7:21:e2:d7:56: 99:75:05:71:27:74:6d:20:8c:f1:77:d8:14:df:55:6f:7c:05: b3:6e:bb:2e:c5:83:c8:5d:39:c7:14:b2:55:a5:98:b3:36:23: 41:44:eb:c1:e4:e8:66:3a:90:d0:58:db:95:bf:d0:e8:d8:b4: 6b:18:20:91:89:b4:7a:71:59:6e:3a:93:66:4a:a8:83:2f:02: 00:57:31:05:ca:d3:8a:d7:64:4b:b5:a3:92:59:30:68:06:a2: 90:9b:94:73:6f:9e:6e:7e:f7:84:18:3a:d8:26:90:c3:42:cf: 25:8c:bd:a7:e9:c6:7c:f4:e9:cc:eb:7f:51:cb:54:31:f7:fa: af:c3:ed:23:d4:99:93:b9:79:56:e0:25:61:78:cc:ff:1c:5d: 98:58:ea:8b:36:fe:59:60:5b:bc:f1:2a:6b:51:a0:40:55:1c: 22:19:d4:87:b3:58:ae:df:8a:f2:8d:3f:85:58:3b:b4:cf:04: 12:04:b5:5a:74:13:95:f0:1b:57:67:4e:32:72:cd:4c:8a:13: e0:74:03:68 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcgVYSpGB/wptuxocTJ8Rez4ATOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFF ODI4OTg4QTAeFw0yNDEwMTgwNTU1MDJaFw0yNTEwMTcwNjAwMDJaMDMxMTAvBgNV BAMTKERDM0Y3QTVDMkJFQjJENDI2ODQ5QzRCMThFQkVBOEMwOUJFNTI5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHk+g4ybwnEnGfh1+ycteSL3oW ypu/yVelbWf/g+vOkxjeYSW1+2D/2MzhmiF5nh1HchvChgbefR6QBtnlX50OERUj nWp7RDQMDmcmW61w+JjAsc7bLrNjOcDoNzYZaThv5HS2zjL/DkZgk0sBBwciSBwC m6URoU9Kf26rgtbfIgdawYd9bespRqg6BbLeCThW2vhruYawiHQUI05eeBo4rmQU StpcWltaPXsTrPjMAMon82CW9I4RC273ZIBVP43QvGmH6NLQKK08qFjPMuAmXjlu r6zbhl6qCIQ0c+RIBsTeDmvLMfsUYlHcCOAZkbacFVNGy9QCoSC2su65elIbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU3D96XCvrLUJoScSxjr6owJvlKU8wHwYDVR0j BBgwFoAU8TZMi2LQqO3/LrfOVWmAEegomIowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjVmYTk4Zi0xZTg1LTQ2MzgtYmI5ZC0yODczNzhhNGNlODcvMC9GMTM2NEM4QjYy RDBBOEVERkYyRUI3Q0U1NTY5ODAxMUU4Mjg5ODhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEzNjRDOEI2MkQwQThFREZGMkVCN0NFNTU2OTgwMTFFODI4 OTg4QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2NWZhOThmLTFlODUtNDYzOC1i YjlkLTI4NzM3OGE0Y2U4Ny8wLzMxMzAzMzJlMzEzNzM4MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspYwDQYJ KoZIhvcNAQELBQADggEBAFYVwI56OEAEsxSRz5b0YDmm3IiqujXJ/SQBOIOmXqnt FG3uSD6HebNCr/JIGHpNWWfXIeLXVpl1BXEndG0gjPF32BTfVW98BbNuuy7Fg8hd OccUslWlmLM2I0FE68Hk6GY6kNBY25W/0OjYtGsYIJGJtHpxWW46k2ZKqIMvAgBX MQXK04rXZEu1o5JZMGgGopCblHNvnm5+94QYOtgmkMNCzyWMvafpxnz06czrf1HL VDH3+q/D7SPUmZO5eVbgJWF4zP8cXZhY6os2/llgW7zxKmtRoEBVHCIZ1IezWK7f ivKNP4VYO7TPBBIEtVp0E5XwG1dnTjJyzUyKE+B0A2g= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org